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1.1. 


1.2. 


Purpose 


The overall purpose of the SLT Boards is to deliver SLT’s purpose 
of strategic oversight and delivery of cross-office priorities and 
plans. The Boards were created to ensure that sufficient capacity 
within these meetings for consideration, challenge, and scrutiny to 
deliver SLT’s collective role. 


SLT’s role is to maintain strategic oversight of the delivery of 
cross-office priorities and plans. Given the range of these 
corporate and regulatory priorities and plans, SLT has delegated 
authority for the exercise of this role to a number of cross-office 
Boards which report into the SLT. The Boards are: 


e Communications and Engagement Board 
e Equality, Diversity and Inclusion Board 

e Policy Board 

e Regulatory Delivery Board 

e Resources Board 


e Risk and Governance Board 
Goals 
SLT has the following goals: 


e We shape the culture and behaviours of the organisation to 
ensure it is appropriate for a modern regulator. 


e We support the Executive Team in horizon scanning and setting 
the strategic direction of the ICO. 


e We actively lead on achieving our strategic objectives, inspiring 
our inspiring our teams to deliver and ensuring high levels of 
impact. 


e We shape the ICO’s risk appetite by identifying and managing 
risks effectively, looking beyond the ICO for best practice and 
creating and exploiting opportunities. 


e We set high standards of service, oversee the impact and 
outcomes of our regulatory work and create opportunities to 
influence. 


We deploy our resources efficiently and effectively. 


3. Responsibilities 


3.1. | SLT is responsible for: 


Strategic and operational Planning - approving and overseeing 
the delivery of business plans and ensuring these are aligned to 
corporate strategies, plans, and priorities. This would include: 


O 


Identifying dependencies, opportunities for cross office 
working and managing these 


Approval of the prioritisation of resources across 
Directorates to deliver these plans 


Updating plans for changes in strategic direction as set by 
the Executive Team 


Organisational delivery and performance management - 
delivery of plans, including the monitoring and reporting of 
progress. This would include: 


O 


Setting and monitoring corporate KPIs and managing 
delivery and demand 


Oversight of the delivery of a programme of organisational 
change and transformation and regulatory priorities through 
sponsorship. 


The coordination and delivery of work to address the ICO’s 
regulatory priorities 


Tracking and responding to changes in demand for ICO 
services 


Considering matters and taking decisions on matters 
relevant to the delivering of business plans and Directorate 
strategies 


Compliance - Ensuring processes, procedures, resources and 
structures are in place to support organisational delivery. This 
would include: 


O 


O 


Approval of internal strategies or policies 


Keeping the risk register updated and delivering mitigating 
action plans 


Reviewing and monitoring monthly spending and financial 
plans 
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6.1. 
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e Governance - as set out at 1.1, SLT has delegated authority for 
many of its responsibilities to various boards. The 
responsibilities for each Board are set out in the terms of 
reference for each Board. SLT will have oversight and provide 
scrutiny and challenge to the decisions, agendas, work 
programmes and reporting undertaken by these Boards. 


SLT is also responsible for ensuring that equality, diversity and 
inclusion (EDI) considerations are continually considered and 
addressed throughout the ICO’s work. SLT is also responsible for 
ensuring the delivery of the ICO’s equality objectives (within the 
Board’s remit). SLT may refer issues to the EDI Board as 
appropriate, and consider issues referred to it by the EDI Board. 


Work programme 


SLT will maintain a work programme which sets out its expected 
activities to meet these responsibilities for the next 12 months. 
SLT will consider this work programme at each meeting. Corporate 
Governance will keep this work programme up to date based on 
the information provided by SLT members. 


Authority 


SLT derives its authority from ET. Where work of SLT is materially 
contributing to achieving ET’s goals, SLT will report this to ET for 
assurance. Where the work of SLT introduces a significant risk to 
achieving ET’s goals, SLT will refer that to the relevant ET 
member, who may refer this to ET for decision. ET’s goals are 
provided as an annex to these Terms of Reference. 


Reporting from other bodies 
SLT Boards 
SLT may commission or delegate work to each of the Boards. 


In the event of a conflict between two Boards, the Chairs should 
meet to determine the way forward and inform Corporate 
Governance accordingly. If a conflict remains, the matter will be 
referred to SLT for decision. 


Priority Programmes 


SLT may be responsible for the delivery of a range of priority 
programmes. These will be delivered through a separate 
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programme board, but as required this programme board will 
report to SLT to ensure appropriate oversight. 


Reporting to other bodies 


Executive Team 


SLT may refer issues to ET where they require clarity, direction 
and approval in areas of greatest corporate risk or opportunity. 


Management Board 


Minutes of SLT meetings will be presented to the Management 
Board for information. 


Chair 


SLT is chaired by the Director of Risk and Governance. Typically 
they will chair alternate meetings. 


When the Chair is unavailable for a meeting, they will nominate a 
substitute to chair the meeting in their absence. 

Composition 

The SLT consists of the following individuals: 

e Director of Risk and Governance (Chair) 

e Director of Public Affairs (Parliament and Government Affairs) 
° Director of Finance 

° PACE Product Owner 

e Director of Regulatory Design 


° Director of Legal Services (Regulatory Advice and 
Commercial) 


e Director of Regulatory Assurance 

e Acting Director of Legislative Reform 

o Director of Governance Transition 

e Director of Regulatory Policy Projects 

e Director of Cyber 

e Director of Digital, IT and Business Services 

e Director of Legal Services (Regulatory Enforcement) 


° Director of International Regulatory Co-operation 
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13. 
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14. 


e Director of Regulatory Risk and Supervision 
e Director of Legal Services (Litigation) 

o Director of People Services 

e Director of Investigations 


e Director of Public Advice and Data Protection Complaints 
Service 


e Director of Legal Services (Legal Policy & Advice) 
e Director of Economic Analysis 
o Director of FOI and Transparency 


Any member of Executive Team may attend SLT meetings, but are 
not required to do so. Any other Directors appointed will also 
become members of SLT. 


The Chair may also invite any other ICO staff to SLT meetings as 
required. 
Quorum 
SLT is quorate with the following members present: 
e The Chair or their nominated substitute; and 


e at least seven other members. 
Information requirements 


All SLT members are responsible for ensuring that appropriate 
information is provided to SLT to complete its responsibilities, 
including appropriate consultation to ensure that all potential 
impacts are considered before decisions are made. The co-Chairs 
are ultimately responsible for determining what information is 
required. 


Budget 


SLT has no specific budget. Any work commissioned by SLT will be 
funded from budgets within the relevant Directorate(s) or funded 
through an approved business case where necessary. This should 
be exercised in accordance with all other ICO budget controls. 


Secretariat 
Secretariat is provided by the Corporate Governance Team. 


Frequency of meetings 


14.1. 
14.2. 


15. 
15.1. 


15.2. 


15:3: 


16. 
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17.2. 


18. 
18.1. 


SLT meets on a quarterly basis. 


The Chair may call additional meetings if required. 


Decision-making between meetings 


In the event that an urgent decision is required between meetings, 
SLT may consider reports by correspondence, particularly those 
reports not likely to require significant discussion. Corporate 
Governance will facilitate this. 


Any reports considered on this basis must receive sufficient 
responses to constitute the quorum for an SLT meeting. SLT 
members will usually be given one week to consider reports 
circulated by email, but if a clear consensus emerges before that, 
the decision may be implemented sooner. If significant discussion 
is required, the report should be referred to the next SLT meeting. 


Corporate Governance will provide a report to each SLT meeting 
on any matters considered by email, the comments received and 
the outcome of the consideration. 


Evaluation 


On an annual basis (or more frequently if required), SLT will 
review the ICO's corporate governance structure to ensure that it 
remains appropriate. Each of the Boards will ensure that they have 
arrangements in place to enable them to feed in to this review. 


SLT will make recommendations for any changes to the corporate 
governance structure to Executive Team. 


Publication of papers 


The agenda for each meeting will be published internally via 
SharePoint. The minutes will be published internally via 
SharePoint, once approved. Reports will be published internally via 
SharePoint where deemed appropriate by report authors. 


Agendas and minutes will be published on the ICO website, with 
redactions where appropriate. Reports will also be published on the 
ICO website where deemed appropriate by report authors. 


Links to other forums 


SLT’s place in the overall governance structure is set out in the 
diagram below. 


Communications and 
Engagement Board 


Equality, Diversity and 
Inclusion Board 


Policy Board 


Executive Team Senior Regulatory Delivery Board 
Leadership Team 


Resources Board 


Risk and Governance Board 


Annex — Executive Team goals 


° Position of the organisation as the information rights regulator - 
setting the vision and mission and ensuring that all activities, either 
directly or indirectly, contribute towards it. Long-term horizon 
scanning, ensuring the strategic direction is based on a collective 
understanding of policy issues; using outside perspective to ensure 
that the ICO is challenged on its outcomes and understanding the 
perspective of others, in particular the regulated community and the 
public. 


e Setting the tone and culture of the ICO - setting the ICO’s risk 
appetite and ensuring controls are in place to manage risk; agreeing 
and monitoring the ICO’s people related strategies and plans, 
monitoring the organisation’s compliance culture and ensuring there 
is a clear vision for the way the ICO works and understanding of its 
values. 


e Ensuring the ICO has the capacity and capability it needs - 
determining sign-off of large operational projects or programmes; 
ensuring sound financial management; scrutinising the allocation of 
financial and human resources to achieve the plan and ensuring 
organisational design supports attaining strategic objectives. 
Evaluation of the Board and its members and succession planning to 
ensure the ICO has the capability to deliver and to plan to meet 
current and future needs. 


Defining the perception of the ICO - agreeing plans and strategies; 
setting objectives for strategic engagement activities; driving the ICO 
to be an effective, modern, independent regulator. 


Monitoring the performance of the ICO towards achieving its strategic 
goals - ensuring clear, consistent, comparable performance 
information is used to drive improvements and demonstrate the 
impact of the work of the organisation. Monitoring and steering 
performance against plan; scrutinising performance and setting the 
ICO’s standards and values, holding the Executive to account for 
delivery of its plans and strategies. 


